Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
File: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft (raw, json)
Hash identifier: pN8/cC0ABKnWUZasvCA4z5lBaIlKjZzx20u+vWtfN84=
Subject key identifier: 28:15:9C:CD:42:4F:D1:0E:7C:1B:B7:7A:45:7A:7C:DC:2E:1F:C9:12
Authority key identifier: 36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
Certificate issuer: /CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Certificate serial: 0197B70F1D3BEAAC29914A8861379AE504B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
Manifest number: 02A3
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl (hash: /GSP6fuixWpiczJ0ZgkKaByC8GLSaMZ9/XzUBGHK44g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1d:3b:ea:ac:29:91:4a:88:61:37:9a:e5:04:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366fa0ca18aff214ec05b5d4780eb3c6eee66e3e
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=28159ccd424fd10e7c1bb77a457a7cdc2e1fc912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a3:6c:19:8d:d6:c9:9c:0c:89:72:8b:94:f0:
0b:54:ed:f5:79:92:f0:80:64:93:43:8c:b3:a6:ce:
18:15:4c:68:61:17:8b:28:50:35:16:d2:65:b3:7e:
4d:6e:c0:29:69:74:98:f7:52:9c:d2:7f:c8:c6:71:
4d:50:d6:bc:f8:30:69:eb:ab:1e:bb:18:11:60:3a:
f2:d1:da:c8:3f:5d:ab:49:a5:8d:c3:76:d5:96:32:
c6:ac:a4:80:15:06:80:6f:7d:99:cc:80:9e:e7:1d:
42:58:e9:98:2b:aa:b9:62:fd:4c:0f:55:17:0e:77:
d2:96:9f:c8:5e:3a:e2:d6:9c:53:a0:76:87:34:e7:
6a:a2:37:2b:9f:d2:66:75:4b:17:8b:24:35:86:6b:
0b:5f:43:26:76:13:07:9b:4e:5b:f0:7c:b5:f2:16:
aa:08:3f:bb:b6:3e:76:85:c3:0a:bb:3b:c6:af:cc:
a5:8e:bc:47:1a:c3:2c:e4:da:8e:ce:f8:08:db:e8:
ed:c1:5f:20:1b:8e:7c:46:6d:50:08:35:58:86:63:
f7:75:64:b8:ef:16:a8:1c:ae:a6:04:e6:da:19:d2:
ee:0f:75:ba:37:df:33:97:f2:78:90:7f:fc:bd:fc:
e5:01:39:a5:7d:40:4c:8f:cd:a0:00:17:a9:75:3d:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:15:9C:CD:42:4F:D1:0E:7C:1B:B7:7A:45:7A:7C:DC:2E:1F:C9:12
X509v3 Authority Key Identifier:
keyid:36:6F:A0:CA:18:AF:F2:14:EC:05:B5:D4:78:0E:B3:C6:EE:E6:6E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/654487-9a2d-4f67-8f73-86e3642c0523/1/Nm-gyhiv8hTsBbXUeA6zxu7mbj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3f:10:cd:2c:b4:4e:1e:08:3d:56:20:75:84:8a:4c:eb:a4:
8d:49:49:76:15:22:98:9e:90:ee:ff:e5:e1:48:e5:27:2f:d0:
05:a9:f2:81:44:29:1e:46:32:f2:a9:de:ac:d6:84:e6:23:6b:
59:19:f4:47:17:00:8f:c1:3b:dc:b8:b9:7b:1c:79:86:ea:a3:
ef:02:72:f8:e0:d5:7f:93:19:1a:a6:1e:b3:c8:a7:03:f1:b7:
2f:07:34:73:fd:66:24:b9:01:43:40:14:0c:bf:5a:f7:a2:42:
eb:83:c8:de:4b:e7:07:d2:95:f5:34:e7:c1:30:48:bd:8b:85:
55:63:4f:0f:5f:cd:ce:4f:1c:8d:10:2b:07:0c:3c:13:5e:91:
26:62:c3:28:47:b1:9e:56:8c:6a:02:db:de:f9:05:4b:a5:3b:
f6:e9:d5:ed:e8:5a:cf:24:71:9b:f3:ff:04:9e:7e:f9:87:7a:
36:7b:29:92:f7:8e:d6:1b:e0:e8:39:1d:6f:51:cd:d9:6a:f3:
c1:dc:c1:ac:37:2a:8b:f6:6c:78:ed:9f:1e:fd:3e:e3:d3:e6:
d7:49:dc:5a:ef:a0:93:36:06:92:f7:59:9b:77:0b:d2:45:c4:
75:0f:78:96:65:31:c2:11:9d:6b:0e:bc:e6:4b:5a:bc:a7:84:
5c:d1:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:11 2025 by rpki-client